ctrlINT What the industry said about every indicator, with the quote

CopperStealerMalware

  • mingloa

According to PCRIsk, CopperStealer, also known as Mingloa, is a malicious program designed to steal sensitive/personal information. It also has the capability to cause chain infections (i.e., download/install additional malware). Significant activity of CopperStealer has been observed in Brazil, India, Indonesia, Pakistan, and the Philippines.From MISP Galaxy

Last reported 15 months ago, by Group-IB1 report

ATT&CK techniques

1 technique · each with the sentence it comes from
  1. T1553.002Code Signing

    “Figure 3: Code Signing Capability Overlaps Identified Among Different Threat Actors”

    Group-IBVendor

What the reports say

1 report, newest first · the exact sentence from each
  1. “The largest share of signed kernel driver samples was linked to FiveSys, followed by Netfilter, CopperStealer, POORTRY, and RedDriver.”

    Group-IBVendor
    Exploiting Trust: How Signed Drivers Fuel Modern Kernel Level Attacks on Windows

Thanks — we review every report.

Report a wrong match
What is wrong with CopperStealer here?
No account needed. We do not store your IP address.